CVSS 3.1 Score 6.5 of 10 (medium)


Published Jan 16, 2024
Updated: Jan 24, 2024
CWE ID 327


CVE-2024-22192 is a vulnerability in the Ursa cryptographic library, specifically impacting the revocation scheme used by Ursa CL-Signatures implementations. This flaw can potentially compromise the privacy guarantees of the AnonCreds verifiable credential model. A malicious verifier could exploit this vulnerability to generate a unique identifier for a holder who presents a Non-Revocation proof. The impact of this vulnerability is that the malicious verifier may be able to determine the unique identifier of the holder. Unfortunately, Ursa has reached end-of-life status, and no fix is expected to address this flaw. The vulnerability has a base severity rating of MEDIUM and a base score of 6.5 according to NIST's National Vulnerability Database (NVD).

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-22192 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options